CVE-2024-0534: falha de alta gravidade em Tenda A15
Tenda A15 Web-based Management Interface SetOnlineDevName stack-based overflow
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.2epss 1.7%
A vulnerability classified as critical has been found in Tenda A15 15.13.07.13. Affected is an unknown function of the file /goform/SetOnlineDevName of the component Web-based Management Interface. The manipulation of the argument mac leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250704. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Tenda · A15CVEs relacionadas — Tenda A15
No mesmo produto, das mais perigosas para as menos.
CVE-2025-4897HIGHTenda A15 HTTP POST Request multimodalAdd buffer overflowEPSS 7.2%CVE-2026-4567CRITICALTenda A15 UploadCfg stack-based overflowEPSS 3.8%CVE-2024-0532HIGHTenda A15 Web-based Management Interface WifiExtraSet set_repeat5 stack-based overflowEPSS 1.8%CVE-2024-0533HIGHTenda A15 Web-based Management Interface SetOnlineDevName stack-based overflowEPSS 1.7%CVE-2024-0531HIGHTenda A15 Web-based Management Interface setBlackRule stack-based overflowEPSS 1.7%CVE-2025-12619HIGHTenda A15 openNetworkGateway fromSetWirelessRepeat buffer overflowEPSS 0.9%